The problem has since been fixed, according to The Verge, but it still allowed hackers to get a hold of millions of users’ email addresses and phone numbers. The problem was initially thought to be limited to verified users, but was later revealed to affect other non-verified users as well.

Verge reported that Instagram is working with law enforcement to push back on the sale of information.